Zyxel is releasing new firmware updates to address a zero-day vulnerability in its GS1900 series network switches that was actively exploited in the wild. Researchers say the flaw allows an attacker who can reach the web management interface to execute commands on the device without authentication.
One report highlights that an earlier vendor fix did not fully block the same exploit path, leaving switches exposed even after receiving the initial remediation. Another outlet reports that the vulnerability was used to compromise close to 1,000 switches and that attackers may have accessed configuration files and credentials. Together, the coverage focuses on both the technical impact—unauthenticated root command execution—and the scope of exploitation, while describing the corrective action as targeted firmware updates for affected GS1900 models.
